a48f2701868dada5561b9bdb01fda74a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a48f2701868dada5561b9bdb01fda74a_JaffaCakes118
Size

318KB
MD5

a48f2701868dada5561b9bdb01fda74a
SHA1

3c94627ce15efc16b68478033a259ef10f6b3d98
SHA256

8df69fff23642f8bbdb64f2701e6e5e1bd74a7df1b943cc5a21655919dcb7c01
SHA512

aaedf23fd829191e00523104c570d4d22d93127dd8b4eb9742522d7374be98d9cc4c10cefd8fb6386688793a7f98f9447953860fb5b608bbc742d1bd5ae3ab94
SSDEEP

6144:/hmK72m4AP9fBG4Via0I6AUDgCP2r30knlBvB+f8a+l8NTR4:ZhKbAO40aurDMrqN2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a48f2701868dada5561b9bdb01fda74a_JaffaCakes118

Files

a48f2701868dada5561b9bdb01fda74a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE